User manual US ROBOTICS USR5462

U.S. Robotics 802.11g 54Mbps Router USER GUIDE rev 1.0 9-04 R24.0769.00 9 Trademarks: Other product and company names are trademarks or registered trademarks of their respective holders. TABLE OF CONTENTS About the 802.11g 54Mbps Router . . . . . . . . . . . . 1 LED Indicators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Front and Rear Panels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Installing the 802.11g 54Mbps Router . . . . . . . . . . 4 Basic Installation Procedure . . . . . . . . . . . . . . . . . . . . . . . 4 Configuring the 802.11g 54Mbps Router . . . . . . . 9 Navigating the Web Browser Interface . . . . . . . . . . . . . . . . . . . . 9 Making Configuration Changes . . . . . . . . . . . . . . . . . . . 10 Setup Wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 Time Zone . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 Broadband Type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 Advanced Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17 System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 WAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22 LAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28 Wireless . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 WDS (Wireless Distribution System) . . . . . . . . . . . . . . . 36 NAT - Network Address Translation . . . . . . . . . . . . . . . . 38 Firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42 DDNS (Dynamic DNS) Settings . . . . . . . . . . . . . . . . . . . 50 UPnP (Universal Plug and Play) Setting . . . . . . . . . . . . . 51 Tools . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53 Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56 Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . 57 Regulatory and Warranty . . . . . . . . . . . . . . . . . . . 67 ABOUT THE 802.11g 54Mbps Router Congratulations on your purchase of the 802.11g 54Mbps Router. U.S. Robotics is proud to provide you with a powerful yet simple communication device for connecting your home network or local area network (LAN) to the Internet. LED Indicators The 802.11g 54Mbps Router includes status LED indicators, as described in the following figure and table. 802.11g 54Mbps Router 100 10 1 2 3 4 100 10 LED PWR (Green) Status On Description The 802.11g 54Mbps Router is receiving power. WLAN (Green) On Flashing The 802.11g 54Mbps Router has established a valid wireless connection. The WLAN port is transmitting or receiving traffic. The WAN port has established a valid network connection. WAN (Green) On On Flashing The indicated LAN port has established a valid 100 Mbps network connection. The indicated LAN port is transmitting or receiving traffic. LAN1-4 100 1 About the 802.11g 54Mbps Router LED Status On Flashing Description The indicated LAN port has established a valid 10 Mbps network connection. The indicated LAN port is transmitting or receiving traffic. LAN1-4 10 Front and Rear Panels The following figure shows the components of the 802.11g 54Mbps Router: Figure 1. Front and Rear Panels 802.11g 54Mbps Router 100 10 1 2 3 4 100 10 Item LEDs Power Inlet Description Power, WLAN, WAN and LAN port status indicators. (See "LED Indicators" on page 1.) Connect the included power adapter to this inlet. Warning: Using the wrong type of power adapter may damage your router. WAN Port WAN port (RJ-45). Connect your cable modem, DSL modem, or an Ethernet router to this port. 2 Item Reset Button Description Use this button to reset the power and restore the default factory settings. Fast Ethernet ports (RJ-45). Connect devices (such as a PC, hub or switch) on your local area network to these ports. (LAN) Ports System Requirements You must have an ISP that meets the following minimum requirements: · · · · Internet access from your local telephone company or Internet Service Provider (ISP) using a DSL modem or cable modem. A computer equipped with a 10 Mbps, 100 Mbps, or 10/100 Mbps Fast Ethernet card, or a USB-to-Ethernet converter. TCP/IP network protocol installed on each PC that needs to access the Internet. A web browser, such as Microsoft Internet Explorer 5.5 or above installed on one PC at your site for configuring the 802.11g 54Mbps Router. 3 Installing the 802.11g 54Mbps Router INSTALLING THE 802.11g 54Mbps Router Basic Installation Procedure Note: It is important that you have your serial number written down before you install the 802.11g 54Mbps Router. You can find your serial number on the bottom label of the 802.11g 54Mbps Router. If you ever need to call our Technical Support department, you will need this number to receive assistance. Model Number USR5462 Serial Number Note: Be sure to find out what letter your CD-ROM drive uses before you begin installing your new product. You will need to know this to properly install your software. Step One: Connect your modem to the 802.11g 54Mbps Router · Turn off your computer and your cable or DSL modem. · Locate the Ethernet cable from your cable or DSL modem that is connected to your computer's Ethernet adapter. · If your broadband is connected, disconnect that Ethernet cable from your computer's Ethernet adapter. · Use the Ethernet cable to connect your cable or DSL modem to the WAN port on the rear of the 802.11g 54Mbps Router. 4 Installing the 802.11g 54Mbps Router Note: Some cable or DSL modems can be connected using either a USB cable or an Ethernet cable. To connect your cable or DSL modem to the 802.11g 54Mbps Router, you must use an Ethernet cable. Step Two: Connect your 802.11g 54Mbps Router to your computer and connect the power supply Connect one end of the supplied Ethernet cable to your computer's Ethernet adapter. Connect the other end to one of the LAN ports on the 802.11g 54Mbps Router. 5 Installing the 802.11g 54Mbps Router Turn on your cable or DSL modem. Connect the included power adapter to the power socket on the 802.11g 54Mbps Router. Plug the power adapter into a standard power outlet. Turn on your computer. Step Three: Configure the basic connection settings Note: You will also need to verify that the HTTP Proxy feature of your web browser is disabled. Refer to "Troubleshooting" on page 57. Perform the steps of the Setup Wizard to configure the basic connection settings of the 802.11g 54Mbps Router. Your Internet connection user name and password will be required for the installation of the 802.11g 54Mbps Router. Depending on your ISP, you may need to know some of the following information: IP Address, Subnet Mask, Gateway/Router, DNS Servers/ Name Servers, and Service Name (optional). Note: To obtain the necessary information, first look within your login application. If you cannot find all the necessary information, contact your ISP for assistance in obtaining this information. 6 Installing the 802.11g 54Mbps Router 1. Launch a Web browser. In the location or address line of your Web browser, type http://192.168.2.1 to access the Web User Interface. After the connection is established, you will see the Web User Interface. The default password is admin. Click Login. When you access the Web User Interface, click the Setup Wizard. Note: If you are prompted to connect to the Internet, you may need to select Try Again or Connect, depending on your Internet browser. 2. 3. Select your Time Zone and then click Next. Choose your Broadband Type. (Enter the appropriate information for the type of Internet connection you chose.) When you are finished, click Next. Refer to "Broadband Type" on page 12 for more information. If required, enter the IP address Info for the 802.11g 54Mbps Router and then click Finish. 4. After finishing the Setup Wizard, if it does not report "Connected," perform the steps of the Setup Wizard again. If Web User Interface still did not report "Connected," or if at anytime you want to validate your Internet settings, click Advanced Setup and select Status. To make a wireless connection: Make sure each wireless adapter that will be connected to the network is set to Infrastructure mode. If you purchased the USR5470 Wireless Starter Kit, refer to the Navigating the Wireless Configuration Utility section of the 802.11g 54Mbps USB Adapter User Guide on the Installation CD-ROM to determine how to change this setting and for instructions on collecting your configuration information. If you are connecting a different wireless adapter, refer to that wireless adapter's documentation. 7 Installing the 802.11g 54Mbps Router When you are finished configuring the basic connection settings, you should now have Internet access. Launch a Web browser and register your product at www.usr.com/productreg If the page loads, you are finished with the installation procedure. If the page does not load, refer to the Troubleshooting section. Note: Refer to"Configuring the 802.11g 54Mbps Router" on page 9 for more detailed configuration information. Contact your ISP if you have any questions about your WAN type or your connection information. The installation procedure for the 802.11g 54Mbps Router is now complete. If you experience any difficulties, refer to "Troubleshooting" on page 57 for more detailed information. 8 Configuring the 802.11g 54Mbps Router CONFIGURING THE 802.11G 54MBPS ROUTER The 802.11g 54Mbps Router can be configured by Windows Internet Explorer 5.5 or above. Using the Web User Interface, you can configure the 802.11g 54Mbps Router and view statistics to monitor network activity. Before you attempt to log into the web-based administration, please verify the following. 1. Your browser is configured properly (see below). 2. Disable any firewall or security software that may be running. 3. Confirm that the cable is securely plugged into your computer and the 802.11g 54Mbps Router (ports 1-4). 4. Make sure that the LED that corresponds with the port you are using is lit green. If you don't have a link light, then try another cable until you get a good link. Navigating the Web Browser Interface To access the 802.11g 54Mbps Router's user interface, enter the 802.11g 54Mbps Router IP address in your web browser http:// 192.168.2.1 Then enter the password and click LOGIN. (The default password is admin.) Note: Passwords can contain from 3 to 12 alphanumeric characters and are case sensitive. 9 Configuring the 802.11g 54Mbps Router The home page displays the Setup Wizard and Advanced Setup options. The 802.11g 54Mbps Router's user interface features a Setup Wizard and an Advanced Setup section. Use the Setup Wizard if you want to quickly set up the 802.11g 54Mbps Router for use with a cable modem or DSL modem. Advanced setup supports more advanced functions like hacker attack detection, IP and MAC address filtering, intrusion detection, virtual server setup, virtual DMZ hosts, and other advanced functions. Making Configuration Changes Configurable parameters have a dialog box or a drop-down list. Once a configuration change has been made on a page, be sure to click the APPLY or NEXT button at the bottom of the page to enable the new setting. 10 Setup Wizard Setup Wizard Time Zone Click on the Setup Wizard picture. The first item in the Setup Wizard is Time Zone setup. For accurate timing of client filtering and log events, you need to set the time zone. Select your time zone from the drop-down list, and click NEXT. 11 Broadband Type Select the type of broadband connection you have. Note: If you have any questions regarding what type of service you have, check with your Internet Service Provider for more information. For a cable modem connection see the following page. For a Fixed-IP xDSL connection see "Fixed-IP xDSL" on page 13, for a PPPoE xDSL connection, see "PPPoE xDSL" on page 14, for a PPTP connection, see "Point-to-Point Tunneling Protocol (PPTP)" on page 15, and for BigPond connection, see "BigPond" on page 16. 12 Cable Modem or xDSL Router Your Internet Service Provider may have given you a host name. If so, enter it into the field. Your connection may require you to clone your MAC address. If required, enter the MAC address of the network adapter that was used to setup your cable connection. Then click Clone MAC address. Click Finish to complete the setup. The Status page will be displayed, allowing you to view the connection status, as well as other information. See "Status" on page 56 for details. Fixed-IP xDSL Some xDSL Internet Service Providers may assign a fixed (static) IP address. If you have been provided with this information, choose this option and enter the assigned IP address, Subnet Mask, Gateway IP Address, and DNS IP address. Click Finish to complete the setup. 13 Configuring the 802.11g 54Mbps Router PPPoE xDSL Enter the PPPoE User Name and Password assigned by your Service Provider. The Service Name is normally optional, but may be required by some service providers. Leave the Maximum Transmission Unit (MTU) at the default value (1454) unless your service provider has specified otherwise. Enter a Maximum Idle Time (in minutes) to define a maximum period of time for which the Internet connection is maintained during inactivity. If the connection is inactive for longer than the Maximum Idle Time, it will be dropped. (Default: 0) Enable the Auto-reconnect option to automatically re-establish the connection as soon as you attempt to access the Internet again. Click Finish to complete the setup. 14 Setup Wizard Point-to-Point Tunneling Protocol (PPTP) Point-to-Point Tunneling Protocol is a connection method used for xDSL connections in Europe. It can be used to join different physical networks using the Internet as an intermediary. If you have been provided with the information as shown on the screen, enter the PPTP Account name and password, Host Name, Service IP Address, the assigned IP Address, and Subnet Mask. Leave the Maximum Transmission Unit (MTU) at the default value (1460) unless your service provider has specified otherwise. Enter a Maximum Idle Time (in minutes) to define a maximum period of time for which the Internet connection is maintained during inactivity. If the connection is inactive for longer than the Maximum Idle Time, it will be dropped. (Default: 10) Enable the Auto-reconnect option to automatically re-establish the connection as soon as you attempt to access the Internet again. Click Finish to complete the setup. 15 Configuring the 802.11g 54Mbps Router BigPond If you use the BigPond Internet Service which is available in Australia, enter the User Name, Password and Authentication Service Name for BigPond authentication. Click Finish to complete the setup. 16 Advanced Setup Advanced Setup Use the Web User Interface to define system parameters, manage and control the 802.11g 54Mbps Router and its ports, or monitor network conditions. The following table outlines the selections available from this program. Menu System Description Sets the local time zone, the password for administrator access, system log server, and the IP address of a PC that will be allowed to manage the 802.11g 54Mbps Router remotely. · Specifies the Internet connection type: (1) Dynamic IP, (2) PPPoE configuration, (3) PPTP, (4) Static IP and ISP gateway address, or (5) BigPond (Internet service available in Australia). · Specifies DNS servers to use for domain name resolution. Sets the TCP/IP configuration of the 802.11g 54Mbps Router's LAN interface and all DHCP clients. Configures the radio frequency, SSID, WPA/WEP encryption, and 802.1x for wireless communications. Shares a single ISP account with multiple users, sets up virtual servers. Configures a variety of security and specialized functions, including: Access Control, Hacker Prevention, and DMZ. Dynamic DNS provides users on the Internet with a method to tie their domain name to a computer or server. With Universal Plug and Play, a device can automatically join a network, obtain an IP address, communicate its capabilities, and learn about the presence and capabilities of other devices. Devices can then directly communicate with each other. This further enables peer-to-peer networking. Contains options to back up and restore the current configuration, restore all configuration settings to the factory defaults, update system firmware, or reset the system. Provides WAN connection type and status, firmware and hardware version numbers, system IP settings, as well as DHCP, NAT, and Firewall information. Displays the number of attached clients, the firmware versions, the physical MAC address for each media interface, and the hardware version and serial number. Shows the security and DHCP client log. WAN LAN Wireless NAT Firewall DDNS UPnP Tools Status 17 Configuring the 802.11g 54Mbps Router System Time Zone Set the time zone and time server for the 802.11g 54Mbps Router. This information is used for log entries and client access control. · Set your local time zone settings Select your time zone from the drop-down list, and set the start and end dates if your area requires daylight savings. To automatically update the 802.11g 54Mbps Router's internal clock by synchronizing with a public time server over the Internet, choose one of the methods below. · Get date and time from online time servers (Network Time Protocol) Choose the online standard time server for your area from the drop-down menu, or enter the IP address of the time server on your network. · Set date and time using the PC's date and time Click on the radio button for synchronizing the 802.11g 54Mbps Router's internal clock with the host PC. 18 Advanced Setup · Set date and time manually For manually setting the date and time, configure the date by selecting the options from the drop-down list, and enter the digits for the time. 19 Configuring the 802.11g 54Mbps Router Password Settings Use this menu to restrict access based on a password. For security you should assign your own password before exposing the 802.11g 54Mbps Router to the Internet. (Default: admin) Passwords can contain from 3 to 12 alphanumeric characters and are case sensitive. Note: If your password is lost, or you cannot gain access to the user interface, press the Reset button on the rear panel (holding it down for at least five seconds) to restore the factory defaults. Enter a maximum Idle Time Out (in minutes) to define a maximum period of time for which the login session is maintained during inactivity. If the connection is inactive for longer than the maximum idle time, it will perform system logout, and you have to log into the web user system again. (Default: 9 minutes) 20 Advanced Setup Remote Management Remote Management allows a remote PC to configure, manage, and monitor the 802.11g 54Mbps Router using a standard web browser. Check Enable and set the IP address or IP address range of the remote host. Click APPLY. (Default: Disable) Note: If you select Any IP Address in the Allow Access to field, any host can manage the 802.11g 54Mbps Router. Syslog Server The Syslog Server downloads the 802.11g 54Mbps Router's log file to the server with the IP address specified on this screen. (Default: Disabled) 21 Configuring the 802.11g 54Mbps Router WAN Specify the WAN connection type provided by your Internet Service Provider, then click More Configuration to enter detailed configuration parameters for the selected connection type. Dynamic IP The Host Name is optional, but may be required by some ISPs. The default MAC address is set to the WAN's physical interface on the 802.11g 54Mbps Router. Use this address when registering for Internet service, and do not change it unless required by your ISP. If your ISP used the MAC address of an Ethernet adapter as an identifier when first setting up your broadband account, only connect the PC with the registered MAC address to the 802.11g 54Mbps Router and click the Clone MAC Address button. This will replace the current 802.11g 54Mbps Router MAC address with the already registered Ethernet adapter MAC address. If you are unsure of which PC was originally set up by the broadband technician, call your ISP and request that they register a new MAC address for your account. Register the default MAC address of the 802.11g 54Mbps Router. 22 Advanced Setup Point-to-Point Over Ethernet (PPPoE) Enter the PPPoE User Name and Password assigned by your Service Provider. The Service Name is normally optional, but may be required by some service providers. The MTU (Maximum Transmission Unit) governs the maximum size of the data packets. Leave this on the default value (1454) unless your service provider has specified otherwise. Enter a Maximum Idle Time (in minutes) to define a maximum period of time for which the Internet connection is maintained during inactivity. If the connection is inactive for longer than the Maximum Idle Time, it will be dropped. (Default: 10 minutes) Enable the Auto-reconnect option to automatically re-establish the connection as soon as you attempt to access the Internet again. 23 Configuring the 802.11g 54Mbps Router Point-to-Point Tunneling Protocol (PPTP) Point-to-Point Tunneling Protocol (PPTP) can be used to join different physical networks using the Internet as an intermediary. Using the above screen allows client PCs to establish a normal PPTP session and provides hassle-free configuration of the PPTP client on each client PC. Enter the PPTP Account, Password, Host Name, and then Service IP Address (usually supplied by your ISP), the assigned IP address, and subnet mask. Leave the Maximum Transmission Unit (MTU) at the default value (1460) unless your service provider has specified otherwise. Enter a maximum Idle Time Out (in minutes) to define a maximum period of time for which the PPTP connection is maintained during inactivity. If the connection is inactive for longer than the Maximum 24 Advanced Setup Idle Time, it will be dropped. (Default: 0 minutes) Static IP If your Internet Service Provider has assigned a fixed IP address, enter the assigned address and subnet mask for the 802.11g 54Mbps Router, then enter the gateway address of your ISP. You may need a fixed address if you want to provide Internet services, such as a web server or FTP server. 25 BigPond BigPond is a service provider in Australia that uses a heartbeat system to maintain the Internet connection. Configure the built-in client with your user name, password and service name to get on line. 26 DNS Domain Name Servers map numerical IP addresses to the equivalent domain name (e.g., www.usr.com). Your ISP should provide the IP address of one or more domain name servers. Enter those addresses in this screen. 27 Configuring the 802.11g 54Mbps Router LAN · LAN IP ­ Use the LAN menu to configure the LAN IP address for the 802.11g 54Mbps Router and to enable the DHCP server for dynamic client address allocation. Set a period for the lease time if required. For home networks this may be set to Forever, which means there is no time limit on the IP address lease. IP Address Pool ­ A dynamic IP address range may be specified (192.168.2.2­254). IP addresses running from 192.168.2.100­199 are the default values. Once the IP addresses, e.g. 192.168.2.100­199, have been assigned, these IP addresses will be part of the dynamic IP address pool. IP addresses from 192.168.2.2­99, and 192.168.2.200­254 will be available as static IP addresses. · · Remember not to include the address of the 802.11g 54Mbps Router in the client address pool. Also remember to configure your client PCs for dynamic IP address allocation. 28 Advanced Setup Wireless To configure the 802.11g 54Mbps Router as a wireless access point for wireless clients (either stationary or roaming), all you need to do is define the radio channel, the Service Set Identifier (SSID), and encryption options. Channel and SSID You must specify a common radio channel and SSID (Service Set ID) to be used by the 802.11g 54Mbps Router and all of your wireless clients. Be sure you configure all of your clients to the same values. Network Name (SSID): The Service Set ID. This should be set to the same value as the other wireless devices in your network. (Default: USR5462) Note: The SSID is case sensitive and can consist of up to 32 alphanumeric characters. 29 Configuring the 802.11g 54Mbps Router SSID Broadcast: Broadcasting the SSID on the wireless network for easy connection with client PCs. For security reasons, disable SSID broadcast. (Default: Enable) Note: If you disable SSID, it will not show up in your site survey and in order to connect to it, a manual profile will have to be created. Refer to the Navigating the Wireless Configuration Utility section of the 802.11g 54Mbps USB Adapter User Guide on the Installation CD-ROM. Wireless Mode: Set the communication mode for the 802.11g 54Mbps Router. (Default: Long Range Mixed (11b+11g)) The Long Range Mixed (11b+11g) is an enhanced operation mode. The 802.11g standards combines the IEEE 802.11a speed with 54 Mbps. It provides a long range wireless connectivity of 100 m (328 feet) associated with the IEEE 802.11b standards by offering faster speeds and longer distances from a wireless access point to a wireless PC card. 54g+: 54g+ is a technology that utilizes standards based on framebursting to achieve higher throughput. With 54g+ enabled, aggregate throughput (the sum of the individual throughput speeds of each client on the network) can improve by up to 25% in 802.11g only networks and up to 75% in mixed networks comprised of 802.11g and 802.11b equipment.(Default: Enable) Transmission Rate: Set the rate of data transmitted from the 802.11g 54Mbps Router. The lower the data rate, the longer the transmission distance. (Default: Auto) Channel: The radio channel through which the 802.11g 54Mbps Router communicates with PCs in its BSS. (Default: 11) 30 Advanced Setup Note: The available channel settings are limited by local regulations. Security If you are transmitting sensitive data across wireless channels, you should enable Wi-Fi Protected Access (WPA) or Wired Equivalent Privacy (WEP) encryption. Encryption security requires you to use the same protocol set (WPA or WEP) and encryption/decryption keys for the 802.11g 54Mbps Router and all of your wireless clients. For a more secure network, the 802.11g 54Mbps Router can implement one or a combination of the following security mechanisms: · · Wi-Fi Protected Access (WPA) Wired Equivalent Privacy (WEP) page 33 page 34 The security mechanisms that may be employed depend on the level of security required, the network and management resources available, and the software support provided on wireless clients. A 31 Configuring the 802.11g 54Mbps Router summary of wireless security considerations is listed in the following table. Security Client Mechanism Support WEP Built-in support on all 802.11b and 802.11g devices Implementation Considerations · Provides only common security · Requires manual key management WPA mode Requires WPA-enabled · Provides good security in small system and protocol networks driver for network · Requires configured RADIUS server, adapter or manual management of pre-shared key (native support provided in Windows XP) 802.1x mode · Provides robust security in WPA-only mode (i.e., WPA clients only) Requires WPA-enabled · Requires configured RADIUS server system and network adapter driver · 802.1x Extensible Authentication Protocol (EAP) type may require (native support provided management of digital certificates for in Windows XP) clients and server 32 Advanced Setup WPA Encryption Type WPA is a stronger wireless security solution than WEP. It uses a combination of 802.1x authentication and broadcast/session keys. · Pre-Shared Key/Passphrase If there is no authentication server on your SOHO network, you can issue the Pre-Shared Key to the clients that connect to the 802.11g 54Mbps Router. Be sure to use the same key for the 802.11g 54Mbps Router and the connected clients. Notes: 1. Manual Pre-Shared Key supports up to 64-Hex characters. 2. Type 8~63 Hex characters for the Pre-Shared Passphrase. 3. Do not use a key that is long and complex for your clients to type accurately. 4. A Hex (hexadecimal) digit is a number or letter in the range 0-9 or A-F. · 802.1X Mode The 802.11g 54Mbps Router allows you to use 802.1x authentication for an enterprise network environment with a RADIUS server installed. In 802.1x mode, access will be checked against the authentication database stored on the 802.11g 54Mbps Router. You must specify the authentication period, and the corresponding parameters in the RADIUS Server Parameters field for the remote authentication protocol. 33 Configuring the 802.11g 54Mbps Router WEP Encryption Type You can choose between standard 40-bit/64-bit or the more robust 128-bit encryption. You may manually enter the keys or automatically generate encryption keys. To manually configure the keys, enter five hexadecimal pairs for each 40/64-bit key, or enter 13 pairs for the single 128-bit key. For automatic 64-bit security, enter a passphrase and click Generate. Four keys will be generated (as shown below). Choose a key from the drop-down list or accept the default key. Automatic 128-bit security generates a single key. (Default: Open) Note: Active ASCII keys must be exactly 5 characters for 40/ 64-bit WEP. Active ASCII keys must be exactly 13 characters for 128-bit WEP. 34 Advanced Setup If you use encryption, configure the same keys used for the 802.11g 54Mbps Router on each of your wireless clients. Note that Wired Equivalent Privacy (WEP) protects data transmitted between wireless nodes, but does not protect any transmissions over your wired network or over the Internet. 35 Configuring the 802.11g 54Mbps Router WDS (Wireless Distribution System) The WDS provides a means to extend the range of a Wireless Local Area Network (WLAN). WDS allows an access point to establish a direct link to other access points, and stations to roam freely within the area covered by the WDS. (Default: Disable) Notes: 1. Be sure that all access points with the same WDS links should use the same operation "Mode" (802.11b or 802.11g) and radio "Channel" number. 2. Choosing "Auto" of the communication channel is not suggested for using WDS. (See "Channel and SSID" on page 29.) 36 Advanced Setup To establish a WDS connection between access points, follow the steps below. 1. Select Enable Repeater. 2. Enter the MAC Address that you are trying to create a WDS link to. 3. Click Apply. 37 Configuring the 802.11g 54Mbps Router NAT - Network Address Translation From this section you can configure the Address Mapping, Virtual Server, and Special Application features that provide control over the TCP/UDP port openings in the router's firewall. This section can be used to support several Internet based applications such as web, email, FTP, and Telnet. Address Mapping Allows one or more public IP addresses to be shared by multiple internal users. Enter the Public IP address you wish to share into the Global IP field. Enter a range of internal IPs that will share the global IP. 38 Advanced Setup Virtual Server If you configure the 802.11g 54Mbps Router as a virtual server, remote users accessing services such as web or FTP at your local site via public IP addresses can be automatically redirected to local servers configured with private IP addresses. In other words, depending on the requested service (TCP/UDP port number), the 802.11g 54Mbps Router redirects the external service request to the appropriate server (located at another internal IP address). For example, if you set Type/Public Port to TCP/80 (HTTP or web) and the Private IP/Port to 192.168.2.2/80, then all HTTP requests from outside users will be transferred to 192.168.2.2 on port 80. Therefore, by just entering the IP address provided by the ISP, Internet users can access the service they need at the local address to which you redirect them. The more common TCP service ports include: HTTP: 80, FTP: 21, Telnet: 23, and POP3: 110 39 Configuring the 802.11g 54Mbps Router Special Applications Some applications, such as Internet gaming, videoconferencing, Internet telephony and others, require multiple connections. These applications cannot work with Network Address Translation (NAT) enabled. If you need to run applications that require multiple connections, use the following screen to specify the additional public ports to be opened for each application. Specify the public port number normally associated with an application in the Trigger Port field. Set the protocol type to TCP or UDP, then enter the ports that the application requires. 40 Advanced Setup Popular applications requiring multiple ports are listed in the Popular Applications field. From the drop-down list, choose the application and then choose a row number to copy this data into. Note: Choosing a row that already contains data will overwrite the current settings. Example: ID 1 2 Trigger Port 6112 28800 Trigger Type UDP TCP Public Port Public Type Comment 6112 2300-2400, 47624 UDP TCP Battle.net MSN Game Zone For a full list of ports and the services that run on them, see www.iana.org/assignments/port-numbers. 41 Configuring the 802.11g 54Mbps Router Firewall The 802.11g 54Mbps Router firewall can provide access control of connected client PCs, block common hacker attacks, including IP Spoofing, Land Attack, Ping of Death, IP with zero length, Smurf Attack, UDP port loopback, Snork Attack, TCP null scan, and TCP SYN flooding. The firewall does not significantly affect system performance, so we advise leaving it enabled to protect your network users. (Firewall must be enabled in order to access additional settings.) Note: You must click the Apply button, located in the lower right-hand corner of the screen, for your changes to take affect. Access Control Using this option allows you to specify different privileges based on IP address for the client PCs. To Enable Filtering Function, click Yes. Note: Any PCs configured with Firewall rules need to be added in the Access Control Table. 42 Advanced Setup Note: Click Add PC and define the appropriate settings for client PC services (as shown in the following screen). MAC Filtering Table The MAC Filtering feature of the 802.11g 54Mbps Router allows you to control access to your network for up to 32 clients based on the 43 Configuring the 802.11g 54Mbps Router MAC (Media Access Control) address of the client machine. This ID is unique to each network adapter. If the MAC address is listed in the table, that client machine will have access to the network. For MAC Address Control, click Yes. This will allow only the listed PCs access to the network. Enter the desired MAC addresses and then click Apply. 44 Advanced Setup URL Blocking To configure the URL Blocking feature, use the table below to specify the web sites (for example, www.somesite.com) and/or keywords you want to filter on your network. To complete this configuration, you will need to create or modify an access rule in "Access Control" on page 42. To modify an existing rule, click the Edit option next to the rule you want to modify. To create a new rule, click the Add PC option. From the Access Control Add PC section check the option for "WWW with URL Blocking" in the Client PC Service table to filter out the web sites and keywords specified below. Use the above screen to block access to web sites or to web URLs containing the keywords specified in the keyword table. 45 Configuring the 802.11g 54Mbps Router Schedule Rule The Schedule Rule feature allows you to configure specific rules based on time and date. These rules can then be used to configure more specific access control. Enable schedule-based Internet access control. 1. Click Add Schedule Rule. 2. Define the settings for the schedule rule (as shown on the following screen). 3. Click OK and then click the APPLY button to save your settings. 46